Overview#

Subtree Delete Control is defined as an Internet Draft Control is a type of control that can be attached to a delete request that will allow the entry and all of its subordinate entries to be deleted. Normal delete operations may only target leaf entries, but the subtree delete control may be used to target non-leaf entries.

The subtree delete request SupportedControl has an OID of 1.2.840.113556.1.4.805 with no value. There is no corresponding response control.

Some Examples on How To use ldapsearch with the Subtree Delete Control#

The following example shows the use of this control to delete the ou=People,dc=example,dc=com subtree.

ldapdelete -p 1389 -h localhost -D "cn=directory manager" -w password -J 1.2.840.113556.1.4.805
ou=People,dc=example,dc=com
Processing DELETE request for ou=People,dc=example,dc=com

The server MUST list that it recognizes this control in the supportedControl attribute in the root DSE.

We only know of this being defined in Tree Delete Control draft-armijo-ldap-treedelete-02.txt

LDAP Server Implementations Supporting Subtree Delete Control Control#

We only know of this being supported (well listed) in:

• Microsoft Active Directory
• OpenDS
• EDirectory

If you know more, let us know.!! More Information There might be more information for this subject on one of the following:

• 1.2.840.113556.1.4.805
• Active Directory Service Interfaces
• Deleted object
• Glossary Of LDAP And Directory Terminology
• LDAP Extensions and Controls Listing
• Microsoft Active Directory Cool Things